Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: oyjp+QvrbEDqcenYt52q1nHMqk2f9isBxVKqH6UwCAg=
Subject key identifier: 90:F4:34:52:57:30:1E:C7:DD:C2:DA:F1:95:C6:97:DA:1E:E0:38:F7
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 0194BB97163A8AD63F08F031912B6F30E5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 0BBD
Signing time: Fri 31 Jan 2025 09:00:28 +0000
Manifest this update: Fri 31 Jan 2025 09:00:28 +0000
Manifest next update: Sat 01 Feb 2025 09:00:28 +0000
Files and hashes: 1: jjPkPnEOvwVnAAg20Sm72ha1828.roa (hash: qBKDLKoYMFIUxr740I0l1MbmN1H/LYeCtP9acHybLHY=)
2: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: HRr3AKvpPjanthx9AXBmUzYcI/N80XxufiRfGWh2jiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:16:3a:8a:d6:3f:08:f0:31:91:2b:6f:30:e5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Jan 31 09:00:28 2025 GMT
Not After : Feb 1 09:00:28 2025 GMT
Subject: CN=90f4345257301ec7ddc2daf195c697da1ee038f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:2b:05:84:b9:a8:af:30:b2:f4:2d:b4:8f:
05:0f:b9:e0:04:94:19:67:0f:93:25:4e:94:96:b0:
8d:1a:6d:fa:1e:75:67:6f:fd:a4:b7:60:74:fb:48:
2e:64:e6:f8:92:f4:04:bb:4c:32:d7:9d:cc:f2:e6:
d3:36:f6:32:c3:e3:47:ea:ef:cb:76:32:5f:35:d1:
26:62:63:9f:eb:9d:48:c3:dc:df:c1:6c:fd:e2:dc:
dd:8e:b6:ab:27:f2:46:65:0d:09:55:98:28:74:40:
32:63:ed:74:08:1d:43:ce:db:9a:85:e6:f0:e6:5b:
36:fe:64:d8:c5:93:b2:a4:b5:7a:19:6a:4c:6a:44:
36:6c:2e:b2:7e:aa:0f:f9:8c:03:f5:11:95:e7:73:
cc:8f:5a:ea:fd:5b:99:07:f5:5f:e5:4f:63:61:f7:
6b:90:13:ed:e0:5f:64:2d:12:d8:16:d8:28:b3:de:
a3:6b:1e:d4:45:63:0e:5b:e0:6f:3a:91:32:14:cf:
f4:3f:1e:25:ae:51:3d:cb:f3:07:ed:4b:f6:3c:20:
b7:18:8f:73:85:5d:51:54:19:5e:0a:90:e1:63:b4:
97:8a:ea:de:5c:d7:b9:9a:88:ef:7b:40:43:82:fc:
a3:4b:a9:22:f3:76:37:55:08:03:b5:3a:91:8b:4e:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F4:34:52:57:30:1E:C7:DD:C2:DA:F1:95:C6:97:DA:1E:E0:38:F7
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:24:04:c0:10:b9:c6:76:87:e6:a6:96:ce:fe:1c:e6:a5:f0:
f7:26:77:06:2b:db:47:72:c5:18:d7:39:ae:7a:07:2a:99:dd:
be:39:06:2a:a8:c8:b4:2c:8a:c7:8d:ab:6f:ab:7d:b7:7b:f6:
4c:58:9e:77:ae:ba:41:86:b8:77:08:bd:af:d9:84:49:bf:6a:
cd:8c:c9:74:23:41:68:26:c2:d1:e4:54:0a:43:1f:ea:4e:a3:
ec:21:03:99:dc:50:27:70:91:12:e3:50:c4:ba:47:e5:c2:82:
62:03:76:13:3b:15:8a:7b:41:31:e3:c9:fe:9f:4c:eb:d7:d3:
51:e4:b3:73:80:ce:dd:c0:55:1a:d2:66:18:75:48:80:c3:3e:
64:f0:73:e4:7f:06:c7:b3:0a:54:f1:da:b3:38:8c:a4:aa:98:
4d:8e:54:b9:9d:d2:07:6c:4e:1e:ba:0e:0f:94:4a:47:9c:0a:
2b:ad:0d:3a:16:f8:43:58:7b:bf:09:9d:d7:c9:ac:8e:7c:8b:
6b:33:a7:6c:41:25:7f:82:8e:52:2a:ae:d8:88:05:94:1d:4c:
eb:cc:eb:f4:5e:45:74:22:44:24:30:36:f6:79:09:90:7e:9a:
2b:ad:0a:32:70:97:fb:a0:d0:dc:d9:76:02:49:48:2a:7e:98:
8a:fa:19:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:03 2025 by rpki-client on console-fra.rpki-client.org